$ rpki-client -vvf rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa File: AA5A77C88DB811EBA0613421C4F9AE02.roa (raw, json) Hash identifier: fVrnmoIbc0WT1j2hFk/lgNhemMnLi+wRvt02urL7HX0= Subject key identifier: 08:EC:46:54:EA:C5:BE:42:8F:6B:94:E5:E8:2C:D3:09:CA:20:E6:AA Certificate issuer: /CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Certificate serial: 11A3 Authority key identifier: 21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa Signing time: Tue 21 Nov 2023 05:31:12 +0000 ROA not before: Tue 21 Nov 2023 05:31:12 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 33353 IP address blocks: 103.123.138.0/24 maxlen: 24 2403:7940::/33 maxlen: 33 2403:7940:fcc0::/48 maxlen: 48 2403:7940:fcd0::/48 maxlen: 48 2403:7940:fcd1::/48 maxlen: 48 2403:7940:fcd2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4515 (0x11a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91272F9/serialNumber=21CBFE29A994D8F9E03E4C4D44E6CF5B648B78EC Validity Not Before: Nov 21 05:31:12 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=655c40a0-d444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:73:ff:a5:8e:cb:0d:09:ef:b5:92:96:f7: 1a:cd:46:d0:56:51:1e:3d:c4:cc:3a:08:7b:bc:db: 6e:b4:86:8f:0c:b8:8b:c4:73:c4:64:5e:9e:3e:82: 7f:32:9c:a6:52:db:ba:7e:38:21:01:97:07:af:56: 38:1b:f9:44:1b:9c:b3:10:84:b3:17:11:81:ae:e4: 57:98:d9:9b:1b:fa:25:13:11:8e:9b:fe:2b:01:26: 2f:58:bd:48:8b:0f:71:b9:f4:37:51:9a:cc:f7:b3: 18:85:7d:56:91:65:ac:10:94:5b:16:6a:64:70:cd: d9:1e:7e:e0:25:70:44:a7:dc:2e:64:86:d5:e1:a7: 25:3b:ad:4c:8b:bf:b4:bc:01:c1:58:03:97:51:dd: d1:ca:d5:f5:09:76:e6:03:c6:7d:a2:31:f1:9b:83: 3a:ad:1b:46:4e:01:dd:67:58:98:31:66:29:6d:49: 90:fe:73:32:54:40:94:d2:b1:93:2e:d2:0b:e1:50: 00:60:6c:46:c3:67:df:f5:24:44:ad:d8:8e:34:da: fe:5e:68:00:b8:e7:d4:74:80:bb:88:0c:10:b9:93: d6:78:7a:f8:3b:4b:21:43:66:5e:4a:35:6c:15:0b: 65:3b:e4:ff:1c:85:41:06:a5:fe:26:b8:fa:af:75: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EC:46:54:EA:C5:BE:42:8F:6B:94:E5:E8:2C:D3:09:CA:20:E6:AA X509v3 Authority Key Identifier: keyid:21:CB:FE:29:A9:94:D8:F9:E0:3E:4C:4D:44:E6:CF:5B:64:8B:78:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/Icv-KamU2PngPkxNRObPW2SLeOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Icv-KamU2PngPkxNRObPW2SLeOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91272F9/D2ED49C2C26D11E8BABE1165C4F9AE02/AA5A77C88DB811EBA0613421C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.138.0/24 IPv6: 2403:7940::/33 2403:7940:fcc0::/48 2403:7940:fcd0::-2403:7940:fcd2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 7c:1e:33:69:7e:d4:49:aa:f3:15:ba:f3:14:bc:d5:9b:f9:b0: bd:ef:de:a7:7f:6b:50:54:59:93:2f:bb:20:8c:fc:40:17:82: 3b:88:32:8a:b8:1b:32:df:e2:2f:e0:af:5f:42:ca:97:eb:e0: 7f:11:dd:15:2f:11:2f:59:c5:f1:04:a3:d3:af:7e:ad:13:36: 17:de:49:23:f9:c9:1a:f2:c3:8f:e9:66:b0:0d:21:b2:e5:01: 37:e5:b8:52:68:0e:bc:c8:69:90:43:b6:7b:8d:10:5b:6b:3f: 29:70:f4:9f:45:28:84:8c:87:54:a6:62:4a:1a:62:bf:92:90: 39:5f:7c:11:d2:15:79:72:c3:53:9a:0c:c3:ec:86:56:0d:a1: b0:73:63:4e:d7:e8:28:38:e9:0c:d4:1a:69:f0:03:2d:21:22: 42:3a:e8:3a:68:6a:08:d9:b8:8e:58:0e:1b:9b:c3:3b:e2:30: b0:24:43:09:76:f4:08:a3:7d:db:42:f1:b9:b2:75:e3:7c:94: 96:aa:b8:0e:06:54:a8:32:5c:98:cc:5c:dd:df:6d:14:ef:ac: 2d:3d:74:79:21:eb:9c:73:4c:89:19:1a:7e:72:b4:35:8c:1d: 3a:2a:d4:42:ad:1d:53:59:98:fa:c7:42:c1:dc:eb:74:4a:0b: 47:6d:6f:18 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICEaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcyRjkxMTAvBgNVBAUTKDIxQ0JGRTI5QTk5NEQ4RjlFMDNFNEM0RDQ0RTZDRjVC NjQ4Qjc4RUMwHhcNMjMxMTIxMDUzMTEyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTVjNDBhMC1kNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndpz/6WOyw0J77WSlvcazUbQVlEePcTMOgh7vNtutIaPDLiLxHPEZF6ePoJ/ MpymUtu6fjghAZcHr1Y4G/lEG5yzEISzFxGBruRXmNmbG/olExGOm/4rASYvWL1I iw9xufQ3UZrM97MYhX1WkWWsEJRbFmpkcM3ZHn7gJXBEp9wuZIbV4aclO61Mi7+0 vAHBWAOXUd3RytX1CXbmA8Z9ojHxm4M6rRtGTgHdZ1iYMWYpbUmQ/nMyVECU0rGT LtIL4VAAYGxGw2ff9SRErdiONNr+XmgAuOfUdIC7iAwQuZPWeHr4O0shQ2ZeSjVs FQtlO+T/HIVBBqX+Jrj6r3WmlQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFAjsRlTq xb5Cj2uU5egs0wnKIOaqMB8GA1UdIwQYMBaAFCHL/implNj54D5MTUTmz1tki3js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzJGOS9EMkVENDlDMkMy NkQxMUU4QkFCRTExNjVDNEY5QUUwMi9JY3YtS2FtVTJQbmdQa3hOUk9iUFcyU0xl T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ljdi1LYW1VMlBuZ1BreE5ST2JQVzJTTGVPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjcyRjkvRDJFRDQ5QzJDMjZEMTFFOEJBQkUxMTY1QzRGOUFFMDIvQUE1QTc3Qzg4 REI4MTFFQkEwNjEzNDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MAwEAgABMAYDBABne4owKwQCAAIwJQMGByQDeUAAAwcAJAN5QPzAMBIDBwQk A3lA/NADBwAkA3lA/NIwDQYJKoZIhvcNAQELBQADggEBAHweM2l+1Emq8xW68xS8 1Zv5sL3v3qd/a1BUWZMvuyCM/EAXgjuIMoq4GzLf4i/gr19Cypfr4H8R3RUvES9Z xfEEo9Ovfq0TNhfeSSP5yRryw4/pZrANIbLlATfluFJoDrzIaZBDtnuNEFtrPylw 9J9FKISMh1SmYkoaYr+SkDlffBHSFXlyw1OaDMPshlYNobBzY07X6Cg46QzUGmnw Ay0hIkI66DpoagjZuI5YDhubwzviMLAkQwl29AijfdtC8bmydeN8lJaquA4GVKgy XJjMXN3fbRTvrC09dHkh65xzTIkZGn5ytDWMHToq1EKtHVNZmPrHQsHc63RKC0dt bxg= -----END CERTIFICATE-----Generated at Wed May 22 20:07:53 2024 by rpki-client on console-ams.rpki-client.org